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ON THE GENERALIZED FERMAT EQUATION 
OVER TOTALLY REAL FIELDS 


HELINE DECONINCK 


Abstract. In a recent paper, Freitas and Siksek proved an asypmtotic version 
of Fermat’s Last Theorem for many totally real fields. We prove an extension of 
their result to generalized Fermat equations of the form Ax^ + ByP + Cz^ = 0, 
where A, B, C are odd integers belonging to a totally real field. 


1. Introduction 

Let A be a totally real number field and let Ok be its ring of integers. In [5], 
Freitas and Siksek study the Fermat equation + + = 0 with a, b, c G Ok and 

p prime. For now let S be the set of primes of Ok above 2 and let Os be the ring 
of S'-integer and Og be the group of S'-units. Freitas and Siksek give a criterion 
for the non-existence of solutions a, b, c G Ok with abc ^ 0 for p sufficiently 
large in terms of the solutions to the 5'-unit equation X + p = 1. The proof uses 
modularity and level lowering arguments over totally real fields. It is natural to 
seek an extention of the work of Freitas and Siksek to generalized Fermat equations 
AaP + BbP + CcP = 0, for given non-zero coefficients A, B, C G Ok- In this paper 
we show that the results of Freitas and Siksek can indeed be extended to any choice 
of odd coefficients A, B, C, provided the set S is enlarged to contain the primes 
dividing ABC as well as the primes dividing 2. 

We now state our results precisely. As in [2], our results will sometimes be 
conditional on the following standard conjecture. 

Conjecture 1 (“Eichler-Shimura”). Let K be a totally real field. Let f be a Hilbert 
newform of level Af and parallel weight 2, and write Qf for the field generated by 
its eigenvalues. Suppose that Qf = Q. Then there is an elliptic curve Eif/K with 
conductor Af having the same h-function as f. 

Let A, B, C be non-zero elements of Ok^ and let p be a prime. Consider the 
equation 

(1) AaP + BhP + CcP = Q, a,b,cGOK; 

we shall refer to this as the generalized Fermat equation over K with coefficients 
A, B, C and exponent p. A solution {a,b,c) is called trivial if abc = 0, otherwise 
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non-trivial. The following notation shall be fixed throughout the paper. 

R = Rad{ABC) =11^ 

q\ABC 
q prime in K 

(2) S = {Cp : *P is a prime of Ok such that *P | 2R} 

T = {ip : ip is a prime of Ok above 2}, 

C/ = {'PeT : /(W2) = l}, V = {^&T : 3 \ v <^{ 2 )} 

Here /(‘P/2) denotes the residual degree of ip. As in [5], we need an assumption 
which we refer to throughout the paper as (ES): 

( either [K : Q] is odd; 

(ES) or H ^ 0; 

[ or Conjecture [T] holds for K. 

Theorem 1. Let K be a totally real field satisfying (ES). Let A, B, C G Ok, and 
suppose that A, B, C are odd, in the sense that if \ 2 is a prime of Ok then 
‘P -j ABC. Write Og for the set of S-units of K. Suppose that for every solution 
(A, p) to the S-unit equation 

(3) A + /i = 1, A, /i S Og , 
there is 

(A) either some Vp G U that satisfies max{|u(p(A)|, |u(p(/i)|} < 4u<p(2), 

(B) or some ^ G V that satisfies both max{|urp(A)|, |u(p(/i)|} < 4u(p(2), and 
v<:p{Xp) = U'p(2) (mod 3). 

Then there is some constant B = B{K, A, B,C) such that the generalized Fermat 
equation (HD with exponent p and coefficients A, B, C does not have non-trivial 
solutions with p > B. 

Theorem [T] gives a bound on the exponent of non-trivial solutions to the gen¬ 
eralized Fermat equation m provided certain hypotheses are satisfied. There are 
practical algorithms for determining the solutions to S'-unit equations (e.g. m) , so 
these hypotheses can always be checked for specific K, A, B, C. The following 
theorem is an example where the S'-unit equation can still be solved, even though 
the coefficients are not completely fixed. 

Theorem 2. Let d > IZ be squarefree, satisfying d = 5 (mod 8) and let q > 29 
be a prime such that q = 5 (mod 8) and = — 1. Let K = Q(-\/d) and assume 
Conjecture Q] for K. Then there is an effectively computable constant Bk.q such 
that for all primes p > BK,q, the Fermat equation 

xP + yP + q^zP = 0 

has no non-trivial solutions with exponent p. 

2. Preliminaries 

We shall need the theoretical machinary of modularity, irreducibility of Galois 
representations and level lowering. These tools and the way we use them is practi¬ 
cally identical to [2] which we refer the reader to for more details. 
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2.1. The Frey curve and its modularity. We shall need the following recently 
proved theorem [1]. 

Theorem 3 (Freitas, Le Hung and Siksek). Let K be a totally real field. Up to 
isomorphism over K, there are at most finitely many non-modular elliptic eurves 
E over K. Moreover, if K is real quadratic, then all elliptic curves over K are 
modular. 

We shall associate to a solution (a, b, c) of (HI the following Frey elliptic curve. 
(4) E-.Y"^ = X{X - AaF){X + BhP) 

Before applying Theorem [3] to the Frey curve associated to our generalized Fermat 
equation CD we shall need the following lemma. 

Lemma 2.1. Let A, B, C G Ok be odd, and suppose that every solution (A,/i) to 
the S-unit equation ([3]) satisfies either eondition (A) or (B) of Theorem]^ Then 
(±1,±1,±1) is not a solution to equation p|). 

Proof. Suppose (±1,±1,±1) is a solution to ([T]). By changing signs of A, B, C, 
we may suppose that (1,1,1) is a solution, and therefore that A + B + C = 0. Let 
\ = AjC and p. = B/C. Clearly (A,/i) is a solution to the S'-unit equation ([3]). 

Suppose first that (A) is satisfied. Then U 0, so there is some ip | 2 with 
residue field F 2 . As A, B, C are odd, we have *P | ABC. Reducing the relation 
A + B + C = {) mod 'P we obtain l + l + l = 0inF2, giving a contradiction. 

Suppose now that (B) holds. By (B) there is some tp G F such that vsp{Xqi) = 
uq3(2) (mod 3). However, as A, B, C are odd, Ufp(A//) = 0. Moreover, 3 | v^{2) 
by definition of V. This gives a contradiction. □ 

Corollary 2.2. Let A, B, C G Ok be odd, and suppose that every solution (A,/r) to 
the S-unit equation © satisfies either condition (A) or (B) of Theorem\^ There 
is some (ineffeetive) constant A = A{K, A, B,C) such that for any non-trivial 
solution (a, b, c) of o with prime exponent p > A, the Frey curve E given by o 
is modular. 

Proof. By Theorem |3l there are at most finitely many possible iG-isomorphism 
classes of elliptic curves over K that are non-modular. Let ji,..., G K he the 
j-invariants of these classes. Write A = —BbP/Aa^. The j-invariant of Ea,b,c is 

j(A) = 2® • (A^ - A -f 1)® • A-2(A - l)-2. 

Each equation j(A) = ji has at most six solutions X G K. Thus there are values 
Xi,..., Xm G K such that if A Afc for all k then E is modular. If A = Afc then 

{-b/a)P = AXk/B, {c/a)P = A{Xk - 1)/C. 

This pair of equations results in a bound for p unless —b/a and c/a are both roots of 
unity. But as K is real, the only roots of unity are ±1. If —b/a = ±1 and c/a = ±1 
then o has a solution of the form (±1,±1,±1) contradicting Lemma [2.11 This 
completes the proof. □ 

2.2. Irreducibility of mod p representations of elliptic curves. To use a 

generalized version of level lowering, we need the mod p Galois representation asso¬ 
ciated to the Frey elliptic curve to be irreducible. The following theorem of Freitas 
and Siksek [3l Theorem 2], building on earlier work of David, Momose and Merel, 
is sufficient for our purpose. 
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Theorem 4. Let K be a totally real field. There is an effective constant Ck, 
depending only on K, such that the following holds. If p > Ck is a rational prime, 
and E is an elliptic curve over K which is semistable at some q | p, then 'Pe.p 
irreducible. 

In [3] the theorem is stated for Galois totally real fields K, but the version stated 
here follows immediately on replacing K by its Galois closure. 

2.3. Level Lowering. As before, AT is a totally real field. Let E/K be an elliptic 
curve of conductor Af and p a rational prime. For a prime ideal q of A' denote by 
Aq the discriminant of a local minimal model for A at q. Let 

(5) Mp := q, Afp := ——. 

qlK. ^ 

phq(A,) 

The ideal AAp is precisely the product of the primes where we want to lower the 
level. For a Hilbert eigenform f over AT, denote the field generated by its eigenvalues 
by Qp The following level-lowering recipe is derived by Freitas and Siksek [2] from 
the works of Fujiwara, Jarvis and Rajaei. 

Theorem 5. With the above notation, suppose the following 

(i) p > 5 and p is unramified in AT 

(ii) E is modular, 

(Hi) fiE,p *'5 irreducible, 

(iv) E is semistable at all q | p, 

(v) p I 'Uq(Aq) for all q | p. 

Then, there is a Hilbert eigenform f of parallel weight 2 that is new at level Afp and 
some prime w of Qj such that w \ p and 'Pe.p Pf.m- 

3. Conductor of the Frey curve 
Let (a, b, c) be a non-trivial solution to the Fermat equation ©• Write 

( 6 ) Ga,b,c = aOx + bOx + cOk, 

which we naturally think of as the greatest common divisor of a, b, c. Over Q, or 
over a number field of class number 1 it is natural to scale the solution (a, b, c) so 
that Qa,b,c = 1 ■ Ok, but this is not possible in general. The primes that divide all 
of a, b, c can be additive primes for the Frey curve, and additive primes are not 
removed by the level lowering recipe given above. To control the final level we need 
to control Ga,b,c- Following [2], we fix a set 

n = {mi,... ,m?i} 

of prime ideals m^ { 2R, which is a set of representatives for the ideal classes of Ok- 
For an non-zero ideal a of Ok, we denote by [a] the class of a in the class group. 
We denote [Ga,b,c] by [a, b, c]. The following is Lemma 3.2 of [2], and states that we 
can always scale our solution (a, b, c) so that the gcd belongs to H. 

Lemma 3.1. Let {a,b,c) be a non-trivial solution to ©• There is a non-trivial 
integral solution (a!,b',c') to o such that the following hold. 

(i) For some ^ G AT*, 

a’ = ^a, b' = fb, 


d = ^c. 


(ii) Qa',b',d = m e "H. 
(Hi) [a',b',c'] = [a,b,c]. 
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Lemma 3.2. Let (a, 6, c) be a non-trivial solution to the Fermat equation CD with 
odd prime exponent p, and scaled as in Lemma so that Ga,b,c = m € H. 

Write E = Ea,b,c for the Frey curve in o, and let A be its discriminant. For a 
prime q we write Aq for the minimal discriminant at q. Then at all q ^ S'U{Tn}, the 
model E is minimal, semistable, and satisfies p \ t>q(Aq). Let M be the conductor 
of E, and let Afp be as defined in ([5]) . Then 

(7) AT = m"" • q, ATp = m'*'™ • , 

q\abc 

q^5u{m} 

where 0 < < rtp < 2 + 6t;(p(2) for ^ | 2, and 0 < < rip < 2 for Vji \ R, and 

0 < 4 < Sm < 2. 

Proof. The discriminant of the model given by E is 16(7li3C)^(a6c)^^, thus the 
primes appearing in Af will be either primes dividing 2R or dividing abc. For 
ip I 2 we have rqj = uq 3 (A/’) < 2 + 6uqj(2) by [SI Theorem IV. 10.4]; this proves 
the correctness of the bounds for the exponents in Af and Afp at even primes, and 
we will restrict our attention to odd primes. As E has full 2-torsion over K, the 
wild part of the conductor of E/K vanishes (|6], page 380) at all odd q, and so 
v^{Afp) < v^{N) < 2. This proves the correctness of the bounds for the exponents 
in Af and Afp at q that divide R and for q = m. 

It remains to consider q | abc satisfying q ^ S'U{m}. It is easily checked that the 
model o is minimal and has multiplicative reduction at such q, and it is therefore 
clear that p \ Uq(A) = t;q(Aq). It follows that Vq{Af) = 1 and, from the recipe for 
Afp in ([5|) that Vq{Afp) = 0. This completes the proof. 

□ 


4. Level Lowering for the Frey Curve 

Theorem 6. Let K be a totally real field satisfying (ES). Let A, B, C G Ok 
be odd, and suppose that every solution (A, to the S-unit equation ([3]) satisfies 
either condition (A) or (B) of Theorem]^ There is a constant B — B{K,A,B,C) 
depending only on K and A, B, C such that the following hold. Let (a, b, c) be 
a non-trivial solution to the generalized Fermat equation CD with prime exponent 
p> B, and rescale {a,b,c) as in Lemma [^7l\ so that it remains integral and satisfies 
Qa,b,c = TR for some m G TL. Write E = Ea^b,c for the Frey curve given in CD- 
Then there is an elliptic curve E' over K such that 

(i) the conductor of E' is divisible only by primes m S'U {m}; 

(ii) fE'{K)[2] = 4; 

(Hi) Pk^p PE',pi 

Write f for the j -invariant of E'. Then, 

(a) for Vp G U, we have uqj(j') < 0; 

(b) for ^ G V, we have either v^{j') <0 or 3 f uqs)/)/ 

(c) for q ^ S, ice have Vq{j') > 0. 

In particular, E' has potentially good reduction away from S. 
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Proof. We first observe, by Lemma [321 that E is semistable outside S' U {m}. By 
taking B to be sufficiently large, we see from Corollary 12.21 that E is modular, and 
from Theorem |3| that ^ is irreducible. Applying Theorem |S] and Lemma 13.21 we 
see that 'Pe,p ^ Pf.ro ^ Hilbert newform f of level Afp and some prime vj \ p of 
Qp Here Qf is the field generated by the Hecke eigenvalues of f. The remainder 
of the proof is identical to the proof of [H Theorem 9], and so we omit the details, 
except that we point out that it is here that we make use of assumption (ES). 

□ 

The constant B is ineffective as it depends on the ineffective constant A in 
Corollary 12.21 However, if AT is a real quadratic field then we do not need that 
corollary as we know modularity from Theorem |3l In this case the arguments of [2] 
produce an effective constant B. 


5. Elliptic curves with full 2-torsion and solutions to the ^-unit 

EQUATION 


Theorem [ 6 ] relates non-trivial solutions of the Fermat equation to elliptic curves 
with full 2-torsion having potentially good reduction outside S. There is a well- 
known correspondence between such elliptic curves and solutions of the S'-unit 
equation ([3]) that we now sketch. 

Consider an elliptic curve over K with full 2-torsion, 

( 8 ) = (a; - ai)(a: - a 2 )(x - 03). 

where oi, 02 , 03 are distinct. The cross ratio 


^ _ 03 — 01 

02 — Oi 

belongs to F^{K) — {0,1, 00 }. Moreover, any A S P^(Ar) — {0,1, 00 } can be written 
as a cross ratio of three distinct oi, 02 , 03 in K and hence comes from an elliptic 
curve with full 2-torsion. Write ©3 for the symmetric group on 3 letters. The action 
of 63 on the triple ( 61 , 62 , 63 ) extends via the cross ratio in a well-defined manner 
to an action on F^{K) — {0, l,oo}. The orbit of A G P^(Ar) — {0, l,oo} under the 
action of 63 is 


(9) 


1 — 


1 A 
1-A’ A- 1’ 


A- 



It follows from the theory of Legendre elliptic curves (0 Pages 53-55]) that the 
cross ratio in fact defines a bijection between elliptic curves over K having full 
2-torsion (up to isomorphism over K), and A-invariants up to the action of © 3 . 
Under this bijection, the © 3 -orbit of a given A G P^(Ar)\{0,1, 00 } is associated to 
the Lf-isomorphism class of the Legendre elliptic curve = x{x — l)(x — A). 
We would like to understand the A-invariants that correspond to elliptic curves over 
K with full 2-torsion and potentially good reduction outside S. The j-invariant of 
the Legendre elliptic curve is given by 


( 10 ) 


J(A)=2«. 


(A2-A + 1)3 
A2(l-A)2 


The Legendre elliptic curve (and therefore its Lf-isomorphism class) has potentially 
good reduction outside S if and only if j(A) belongs to Os- It easily follows from 
OT that this happens precisely when both A and 1 — A are S'-units (recall that S 
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includes all the primes above 2); in other words, this is equivalent to (A, /i) being a 
solution to the S'-unit equation ([3|), where /r = 1 — A. Let As be the set of solutions 
to the S'-unit equation (|31); 

(11) As = {(A,Ai) : A + /r = l, A, /r S 

It is easy to see that the action of 63 on F^{K) — {0,1, 00 } induces a well-defined 
action on A 5 given by 

(A,A^)" = (A^ 1 -A"). 

We denote by & 3 \As the set of 63 -orbits in Ag. We deduce the following. 


Lemma 5.1. Let Es he set of all elliptic curves over K with full 2-torsion and 
potentially good reduction outside S. Define the equivalence relation Ei ^ E 2 on 
Es to mean that Ei and E 2 are isomorphic over K. There is a well-defined bijection 

$ : Es/ —>■ 63 \A 5 

which sends the class of an elliptic curve given by ([5]) to the orbit of 

03 — ai 02 — 03 
02 — Oi ’ 02 — Oi 

in @ 3 \As; the map <1)“^ sends the orbit of {X, p) to the class of the Legendre elliptic 
curve = x{x — l)(a; — A). 

We shall need the following for the proof of Theorem [TJ 


Lemma 5.2. Let E' G Es and suppose that its ^-equivalence class corresponds via 
$ to the orbit of {X, p) € As- Let j' be the j-invariant of E' and ip G T. Then 
(i) > 0 if and only if max{\v<:p{X)\,\v<:p{p)\} < 4u>p(2), 

(a) 3 I U(p(j') if and only u>p(A/r) = U(p(2) (mod 3). 


Proof. Observe that 
( 12 ) 


. 08 (A^-A + 1)V .3 ( 1 -Am)^ 


A2(A- 1)2 

From this we immediately deduce (ii). Let 

m = uq 3 (A), n = v<:p{p), t = max(|m|, \n\ 


If t = 0 then uq}(j') > 8uqj(2) > 0, and so (i) holds. We may therefore suppose 
that t > 0. Now the relation A -I- /i = 1 forces either m = n = —t, or to = 0 and 
n = t, or TO = t and n = 0. Thus U(p(A/i) = —2t < 0 or U(p(A/r) = t > 0. In either 
case, from 113, 

^13(/) = 8uq3(2) — 2t. 

This proves (i). □ 


6 . Proof of Theorem [T] 

Let AT be a totally real field satisfying assumption (ES). Let S, T, U, V be as 
in ©■ Let B be as in Theorem 0 and let (a, 6 ,c) be a non-trivial solution to the 
Fermat equation ([T]) with exponent p > B, scaled so that Ga,b,c = Ri with m G H. 
Applying Theorem[S]gives an elliptic curve E'/K with full 2-torsion and potentially 
good reduction outside S whose j-invariant j' satisfies: 

(a) for all tp G [/, we have uqj(/) < 0 ; 

(b) for all tp G E, we have U(p(j') < 0 or 3 f U(p(/). 
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Let (A,^) be a solution to 5'-unit equation ([3]), whose 63 -orbit corresponds to the 
/^'-isomorphism class of E' as in Lemma 15.11 By Lemma 15.21 and (a), (b) we know 
that 

(o') for all fp S //, we have max{|uq 3 (A)|, |u<p(^)|} > 4 uq 3 ( 2 ); 

(&') for all ‘P S y, we have max{|t;qj(A)|, |u(p(^)|} > 4uq}(2) or uq}(A/r) ^ t><p(2) 
(mod 3). 

These contradict assumptions (A) and (B) of Theorem [U completing the proof. 


7. The S'-unit equation over real quadratic fields 

To prove Theorem [2] we need to understand the solutions to the 5'-unit equation 
for real quadratic fields K. This is easier when S is small in size. 

Lemma 7.1. Suppose [S'] = 2. Let {X, pi) G As. Then, there is some element 
a € so that {X', pt') = (A, satisfies A', pi' G Ok- 

Proof. As p,' = 1 —A' we need only find some element a G 63 so that X' = X°' G Ok- 
Write S = {*Pi,ip 2 }. If uqj^(A) 7 ^ 0 for / = 1, 2, then let A' = A/(A — 1), which 
will have non-negative valuation at iPi and so belongs to Ok- Thus without loss of 
generality we may suppose that v<n, (A) = 0. Now if um, (A) > 0 then A' = A G Ok, 
and if v^,{X) < 0 then A' = 1/A G Ok- □ 

For the remainder of this section d denotes a squarefree integer > 13 that satisfies 
d = 5 (mod 8) and q > 29 a prime satisfying q = 5 (mod 8) and = —1. Let 

K denotes the real quadratic field Q{'/d). It follows that both q and 2 are inert in 
K. We let S = {2,q}. 

Lemma 7.2. Let K and S be as above, and let (A,/r) G As. Then X, p, G Q if and 
only if {X, p) belongs to the &^-orhit {{1/2,1/2), (2,-1), (—l,2)}CAs. 

Proof. Suppose X, p G Q . By Lemma [7.II we may suppose that A and p belong to 
Ok n Q = Z and hence A = ± 2 ’'i( 7 ®L p = ±2^'^q'‘^ where > 0 and Si > 0. As 
X+p= 1 we see that one of ri, r 2 is 0 and likewise one of si, S 2 = 0. Without loss of 
generality r 2 =0. If S 2 = 0 too then we have A± 1 = 1 which forces (A, p) = (2, —1) 
as required. We may therefore suppose that si = 0. Hence ±2’'^ =1. If S 2 = 0 

then again we obtain {X,p) = (2, —1), so suppose S 2 > 0. 

We now easily check that ri = 1 and ri = 2 are both incompatible with our 
hypotheses on q. Thus ri > 3 and so p = ± 9 ®^ = 1 (mod 8 ). As 9 = 5 (mod 8 ), 
we have p = for some integer f > 1 . Hence (g*-(-l)(g‘ — 1) = p—1 = —X = =f 2’'L 
This implies that g* -|- 1 = 2“ and g* — 1 = 2^ where a > 5 > 1. Subtracting we 
have 2“ — 2** = 2 and so 6 = 1 and g = 3 giving a contradiction. □ 

We follow [2] in calling the elements of the orbit {(1/2,1/2), (2, —1), (—1, 2)} ir¬ 
relevant, and in calling other elements of As relevant. Next we give a parametriza- 
tion of all relevant elements of As. This the analogue of [H Lemma 6.4], and shows 
that such a parametrization is possible even though our set S is larger, containing 
the odd prime g. 


Lemma 7.3. Up to the action of 63 , every relevant {X, p) G As has the form 


(13) 
A = 


rp - 2 ^’’! • g^®i — r ]2 ■ g^®^ -f 1 -|- vVd 


172 ■ g^®^ — rji - 2^’'i • g^®i -|- 1 — vyfd 

T = 


2 


2 
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where 

(14) 

? 7 i = ± 1 , t] 2 =± 1 , ri>0, si,S 2 > 0 , S 1 -S 2 = 0 , v e Z, v 0 

are related by 

(15) (7?i • 2^’'! • _ r]2 ■ + 1)^ - dv^ = r]i ■ 

(16) {f ]2 ■ - r]i ■ 22 ’-i . g 2 si 1)2 _ ^^2 = • 2 ^ • g 2«2 ^ 

Proof. If r]i, r] 2 , ri, si, S 2 and v satisfy CT- (HSl), (HU) and A, ^ are given by dia, 
it is clear that (A,/r) is a relevant element of Ag. 

Conversely, suppose (A,/r) is a relevant element of A 5 . By Lemma |7.2l we may 
suppose that A, /r G O/c, and that A, /r ^ Q. As 5 = {2, g} we can write A = 2’'ig'*i A' 
and yL = where X' and /x' are units. As A + /x = 1 we have rir 2 = 0 and 

S 1 S 2 = 0. Swapping A and /x if necessary, we can suppose that r 2 = 0. Let x ^ x 
denote conjugation in K. Then 

AA = ?7i • 2^’'! • g^®i, yiji = r]2- g^'*^, r?i = ±1, 772 = ±1. 

Now, 

A + A = AA - (1 - A)(l - A) + 1 = AA - /x/J + 1 = gi • 2^’'^ • g^*^ - 772 • g^®" + 1. 

Moreover we can write A — A = 7 ;-\/d, where v G Z, and as A ^ Q, we have u 0. 
The expressions for A + A and A — A give the expression for A in (ITSl) , and we deduce 
the expression for /x from fj. = 1 — X. Finally, (1151) follows from the identity 

(A + Xf - (A - A)^ = 4AA, 

and (HU) from the corresponding identity for /x. □ 

Lemma 7.4. Let d = 5 (mod 8 ) be squarefree d > 13 and g > 29 a prime such 
that g = 5 (mod 8 ) and = —1. Then there are no relevant elements of As- 

Proof. We apply Lemma [7.31 In particular, S 1 S 2 = 0. Suppose first that Si > 0. 
Thus S 2 = 0. As (d/g) = —I, we have from (fT^ that g^^^ | v and g'*^ | (772 — 1). 
Hence 772 = 1. Now m can be rewritten as 

24’'ig2«i _d(7;/g'*i)2 =^i 22 ’-i+ 2 . 

Thus (d/g) = (— 771 /g) = 1 as g = 5 (mod 8 ). This is a contradiction. 

Thus, henceforth, si = 0. Next suppose that S 2 = 0. We will consider the 
subcases 772 = — I and 772 = 1 separately and obtain contradictions in both subcases 
showing that S 2 > 0. Suppose 772 = —1. From (fTOl) we have 24’'i — dv^ = —4. If 
ri = 0 or 1 then d = 5 and if x"! > 2 then d = 1 (mod 8), giving a contradiction. 
Hence suppose 772 = I. From (ITSl) . we have 2^’’^ —dn^ = 77i22’’x+2. If n = 0, 1, 2 then 
du^ = 1 ± 4, dv"^ = 16 ± 16, dv^ = 256 ± 64 all of which contradict the assumptions 
on d or the fact that n 7 ^ 0 (by (HU))- If t’i > 3 then 22 '’i “2 _ = d(7;/2''x+^)2 

which forces d = ±1 (mod 8 ), a contradiction. 

We are reduced to Si = 0 and S 2 > 0. From HSU, as (d/g) = —I, we have g®^ | v 
and 

(17) g®^ I ( 77122^1 - 1). 

The conditions g > 29 and g = 5 (mod 8 ) force ri > 5. Write v = 2 * 7 X 7 where 2\w. 
Suppose t < ri — 1. From (1151) we have 77i22’'i —772g^®^ +1 = 2*7X7* where 2 \ w'. Thus 
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— dw'^ = 0 (mod 8), contradicting d = 5 (mod 8). We may therefore suppose 
t > ri. Hence 2’'^ | (772(7^®^ ~ !)■ Thus 772 = 1- Therefore 2’'^ | (g®^ — l)(g®^ + !)• 

Since g = 5 (mod 8), we have 2 || (g®^ + 1) and so 

I (g «2 _ ly 

As g = 5 (mod 8) and ri > 5, we see that S2 must be even, and that 2’''^“^ | 

(g®2/2 _ write g®^/^ = k ■ 2 ’’i“^ + 1 . From (ITTl) . 

^222ri-4 + 1 = g®= < 22’'^ + 1. 

Hence A: = 1, 2 or 3. Moreover, as g®^/^ = 1 (mod 8), we have 4 | S 2 - Hence 

(g®=/'‘ - l)(g*=/'‘ + 1) = 

Again as g = 5 (mod 8) we have 2 || (g®^/'^ + 1) and so g®=/'^ + 1 = 2 or 6, both of 
which are impossible. This completes the proof. □ 

8. Proof of Theorem [2] 

We apply Theorem [T] By Lemma [7.41 all solutions to ([3|) are irrelevant, and the 
irrelevant solutions satisfy condition (A) of Theorem [TJ This completes the proof 
of Theorem [2l 
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